Rick Macklem e86ac20e9f uipc_socket.c: Modify MSG_TLSAPPDATA to only do Alert Records
Without this patch, the MSG_TLSAPPDATA flag would cause
soreceive_generic() to return ENXIO for any non-application
data record in a TLS receive stream.

This works ok for TLS1.2, since Alert records appear to be
the only non-application data records received.
However, for TLS1.3, there can be post-handshake handshake
records, such as NewSessionKey sent to the client from the
server. These handshake records cannot be handled by the
upcall which does an SSL_read() with length == 0.

It appears that the client can simply throw away these
NewSessionKey records, but to do so, it needs to receive
them within the kernel.

This patch modifies the semantics of MSG_TLSAPPDATA slightly,
so that it only applies to Alert records and not Handshake
records. It is needed to allow the krpc to work with KTLS1.3.

Reviewed by:	hselasky
MFC after:	2 weeks
Differential Revision:	https://reviews.freebsd.org/D35170
2022-07-07 14:23:25 +02:00
..
2022-03-07 10:53:16 +01:00
2013-11-11 10:08:08 +01:00
2018-09-21 10:29:38 +02:00
2019-11-13 10:47:04 +01:00
2018-03-28 07:59:12 +02:00
2017-01-10 09:53:31 +01:00
2019-07-09 13:57:03 +02:00
2018-11-15 10:56:14 +01:00
2017-01-10 09:53:34 +01:00
2013-10-31 13:18:49 +01:00
2018-09-21 10:29:38 +02:00